Alcatel-Lucent 5620 Planning Manual page 124

Security
....................................................................................................................................................................................................................................
Table 7-24
Protocol From port
TCP > 1023
When there is a firewall at the interface that communicates with the 5620 SAM Servers,
the following rules apply for inter process communication. If multiple interfaces are used
for 5620 SAM Server communication to the clients (GUI and OSS) and auxiliary servers,
the network traffic from the 5620 SAM Auxiliaries could pass through the SAM client
interface (NIC 3 on
with multiple network interfaces" (p. 8-4)
Figure 8-2, "Distributed 5620 SAM Server/Database deployment with multiple network
interfaces" (p. 8-4)
Table 7-25
Protocol
TCP
TCP
TCP
TCP
TCP
Table 7-26
Protocol
TCP
TCP
TCP
TCP
TCP
TCP
TCP
....................................................................................................................................................................................................................................
7-26
FTP/SFTP Firewall rules for the 5620 SAM Cflowd Auxiliary
Server(s) (continued)
On
Target File Server
Figure 8-2, "Distributed 5620 SAM Server/Database deployment
) of the 5620 SAM Auxiliary.
Firewall rules for inter process communication on the 5620 SAM
Auxiliary Statistics / Call Trace Server(s)
From port On
Any Auxiliary Server(s)
Any Auxiliary Server(s)
12300-12307 Auxiliary Server(s)
Any Auxiliary Server(s)
12800 Auxiliary Server(s)
Firewall rules for inter process communication on the 5620 SAM
Cflowd Auxiliary Server(s)
From port On
Any Auxiliary Server(s)
Any Auxiliary Server(s)
Any Auxiliary Server(s)
Any Auxiliary Server(s)
Any Auxiliary Server(s)
Any Auxiliary Server(s)
Any Auxiliary Server(s)
To port On
Any Auxiliary Server(s)
) or the SAM network interface (NIC 1 on
To port
1095
12300-12307
Any
12800
Any
To port
1090
1098
1099
4444
4445
4446
4447
Firewall and NAT rules
Notes
Passive (S)FTP ports for
data transfer (See "FTP
between the 5620 SAM
Server and 5620 SAM
Auxiliary Statistics
Collector and the
managed network"
(p. 7-15) )
On
Auxiliary Server(s)
Auxiliary Server(s)
Auxiliary Server(s)
Auxiliary Server(s)
Auxiliary Server(s)
On
Auxiliary Server(s)
Auxiliary Server(s)
Auxiliary Server(s)
Auxiliary Server(s)
Auxiliary Server(s)
Auxiliary Server(s)
Auxiliary Server(s)
5620 SAM
3HE-09809-AAAG-TQZZA 13.0 R7
Issue 1 December 2015